<div dir="ltr"><div dir="ltr"><div>Hi,</div><div>Show us what is your JAVA runtime properties</div><div>or just run</div><div># ps aux | grep tomcat<br></div><div><br></div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, 14 Mar 2019 at 17:53, Petr Herman <<a href="mailto:petr.herman@soc365.cz">petr.herman@soc365.cz</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US">
<div class="gmail-m_4050889633662633288WordSection1">
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)">Hello,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)">yes, I’ve tried to add a client private key, client certificate(p12 file) and all related CAs to Java keystore.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)">I’ve changed the name of the certificate KeyEntry to be the same as the HTTPS hostname, I’ve changed the password for the PrivateKeyEntry to be the same as keystore
password, I’ve restarted Midpoint.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><i><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)">#</span></i><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)">keytool -keystore keystore.jceks -storetype jceks -storepass changeit
–list<u></u><u></u></span></p>
<p class="MsoNormal"><b><i><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)"><a href="http://smsconnector.cz.o2.com" target="_blank">smsconnector.cz.o2.com</a>, Mar 14, 2019, PrivateKeyEntry,<u></u><u></u></span></i></b></p>
<p class="MsoNormal"><i><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)">thawte tls rsa ca g1, Mar 14, 2019, trustedCertEntry,<u></u><u></u></span></i></p>
<p class="MsoNormal"><i><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)">default, Aug 17, 2018, SecretKeyEntry,<u></u><u></u></span></i></p>
<p class="MsoNormal"><i><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)">et sms connector, Mar 14, 2019, trustedCertEntry,<u></u><u></u></span></i></p>
<p class="MsoNormal"><i><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)">o2 sms connector, Mar 14, 2019, trustedCertEntry,<u></u><u></u></span></i></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)">There is still the same issue:<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)">2019-03-14 15:53:48,434 [] [pool-6-thread-1] DEBUG (com.evolveum.midpoint.notifications.impl.api.transports.SimpleSmsTransport): Sending SMS to URL <a href="https://smsconnector.cz.o2.com/smsconnector/getpost/GP" target="_blank">https://smsconnector.cz.o2.com/smsconnector/getpost/GP</a>
(method POST)<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)">2019-03-14 15:53:48,434 [] [pool-6-thread-1] DEBUG (com.evolveum.midpoint.notifications.impl.api.transports.SimpleSmsTransport): Using request headers:<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)">[Content-Type: application/x-www-form-urlencoded]<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)">2019-03-14 15:53:48,443 [] [pool-6-thread-1] DEBUG (com.evolveum.midpoint.notifications.impl.api.transports.SimpleSmsTransport): Using request body text (encoding:
ISO-8859-1):<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)">action=send&baID=1991234&fromNumber=%2b420720001234&toNumber=%2b420604555666&text=Test+zprava<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)">2019-03-14 15:53:48,663 [] [pool-6-thread-1] ERROR (com.evolveum.midpoint.notifications.impl.api.transports.SimpleSmsTransport): Couldn't send SMS to [+420604555666]
via null, trying another gateway, if there is any, reason: Received fatal alert:
</span><b><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:red">handshake_failure (class javax.net.ssl.SSLHandshakeException)</span></b><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)">2019-03-14 15:53:48,667 [] [pool-6-thread-1] DEBUG (com.evolveum.midpoint.notifications.impl.api.transports.SimpleSmsTransport): Couldn't send SMS to [+420604555666]
via null, trying another gateway, if there is any.<u></u><u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:red">javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure<u></u><u></u></span></b></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)"> at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)"> at sun.security.ssl.Alerts.getSSLException(Alerts.java:154)<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)"> at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:2020)<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)"> at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1127)<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)"> at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1367)<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)">...<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)">Question is how to force Midpoint or Tomcat to use SSL client certificate from keystore during comunication with particular HTTPS URL?<u></u><u></u></span></b></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)">Thank you for any advices<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)">Best regards<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)">Petr Herman<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri",sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:11pt;font-family:"Calibri",sans-serif" lang="CS">Od:</span></b><span style="font-size:11pt;font-family:"Calibri",sans-serif" lang="CS"> midPoint <<a href="mailto:midpoint-bounces@lists.evolveum.com" target="_blank">midpoint-bounces@lists.evolveum.com</a>>
<b>za uživatele </b>Jason Everling<br>
<b>Odesláno:</b> Tuesday, March 12, 2019 9:10 PM<br>
<b>Komu:</b> midPoint General Discussion <<a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a>><br>
<b>Předmět:</b> Re: [midPoint] sms notification - https client certificate authentication<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">Have you tried adding the client certificate/key into your midpoint keystore then running an sms notification?<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Tue, Mar 12, 2019 at 9:08 AM Petr Herman <<a href="mailto:petr.herman@soc365.cz" target="_blank">petr.herman@soc365.cz</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-color:currentcolor currentcolor currentcolor rgb(204,204,204);border-style:none none none solid;border-width:medium medium medium 1pt;padding:0in 0in 0in 6pt;margin:5pt 0in 5pt 4.8pt">
<div>
<div>
<p class="MsoNormal">Hello everyone,<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"><span lang="CS">the customer wants to integrate O2 SMS gateway using HTTP GET/POST, but SMS gateway is using HTTPS client certificate for authentication.</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="CS"> </span><u></u><u></u></p>
<p class="MsoNormal"><span lang="CS">Does Midpoint support this feature?</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="CS"> </span><u></u><u></u></p>
<p class="MsoNormal"><span lang="CS">Thank you in advance</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="CS">Best regards</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="CS"> </span><u></u><u></u></p>
<p class="MsoNormal"><span lang="CS">Petr Herman</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="CS">Visitech a.s.</span><u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
<p class="MsoNormal">_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><u></u><u></u></p>
</blockquote>
</div>
</div>
</div>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
</blockquote></div><br clear="all"><br>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><span style="color:rgb(76,76,76)">Best regards, <br><br><img src="cid:o.nekriach@dynatech.lv1520941785292-7770"> <br><br>Oleksandr Nekriach | Identity and access management engineer <br><br>Dynatech, <a href="https://www.google.com/maps/place/DYNATECH/@56.9575205,24.1107235,17z/data=!3m1!4b1!4m5!3m4!1s0x46eecf5753e42351:0x23b120b9745cae62!8m2!3d56.9575205!4d24.1129122" target="_blank">Jeruzalemes iela 1, Rīga, LV-1010, Latvia</a><br><br><div style="display:inline-block"><a href="tel:+371%2025%20314%20685" value="+37125314685" target="_blank">+37125314685</a></div>, <div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div> | <div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div> <br><br>Stay connected: <br><div style="display:inline-block;margin:5px 5px 0px 0px"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7771"></a></div><div style="display:inline-block;margin:5px 0px 0px"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7772"></a></div><br><br><span style="font-size:11px;color:rgb(161,161,161)">Confidentiality
Notice: This message contains confidential information and is intended
only for the named recipient(s). If you are not the addressee you may
not copy, distribute or perform any other activities with this
information. If you have received this transmission in error, please
notify us by e-mail immediately. E-mail transmission cannot be
guaranteed to be secure or error-free as information could be
intercepted, corrupted, lost, destroyed, arrive late or incomplete, or
contain viruses.</span></span></div></div></div></div>